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Top Stories 

• The former chief financial officer of Birmingham Health Care in Alabama was charged 
with allegedly helping to siphon $11 million in federal grant money between January 2008 
and March 2012, netting about $1.7 million through the plot. - Birmingham Business 
Journal (See item 15) 

• Jacksonville High School and all schools within the Athens Independent School District in 
Texas were evacuated and dismissed following a series of bomb threats November 5. - 
Tyler Morning Telegraph (See item 16) 

• Federal agents arrested a San Francisco man and charged him for allegedly operating the 
Silk Road 2.0 underweb market that sold illegal drugs, fraudulent identification documents, 
and hacking services and tools. - Krebs on Security (See item 23) 

• At least 10 people were injured November 5 when the driver of an SUV lost control of the 
vehicle and crashed through a wall of DiMassi’s Mediterranean Buffet in Houston. - 
KHOU 11 Houston (See item 27) 
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Energy Sector 

1. November 6, Pittsburgh Post-Gazette - (National) Sunoco to go ahead with $2.5 
billion pipeline through Pennsylvania. A $2.5 billion pipeline project was announced 
by Sunoco Logistics with a proposed capacity of 275,000 barrels of liquids per day that 
is scheduled to be operational by the end of 2016. The Mariner East 2 line will start in 
Ohio and carry natural gas liquids from the Marcellus and Utica shale regions to 
refineries and export points on the East Coast. 

Source: http://powersource.post-gazette.com/powersource/companies- 
powersource/2014/ll/06/Sunoco-announced-2-5B-pipeline-through- 
Pennsvlvania/stories/20 141 1060284 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

2. November 6, Softpedia - (International) Australia, UK and US are most affected by 
Dridex banking trojan. Trend Micro researchers identified an email campaign 
attempting to distribute the Dridex banking trojan and targeting users in the U.S., U.K., 
and Australia. The malware is considered the successor to the Cridex banking trojan 
and can steal online banking credentials. 

Source: http://news.softpedia.com/news/Australia-UK-and-US-Are-Most-Affected-by- 
Dridex-Banking-Trojan-464287.shtml 
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3. November 6, Reuters - (International) U.S. charges Texas man with running bitcoin 
Ponzi scheme. A McKinney, Texas man who operated Bitcoin Savings and Trust was 
charged by federal authorities November 6 for allegedly defrauding investors in his 
virtual currency operation out of more than $4.5 million. The man allegedly operated 
his company as a Ponzi scheme, using new investors’ money to make payments to 
previous investors as well as misappropriating money for his personal expenses. 

Source: http://www.reuters.com/article/2014/ll/06/us-bitcoin-charges- 
idUSKBN0IQ21I20141 106 

4. November 3, Southern California City News Service - (California) FBI looking for 
Orange County ‘Cal Bear Bandit’ bank robber. The FBI November 3 asked for the 
public’s assistance in finding the suspect kn own as the “Cal Bear Bandit” who is 
suspected in five bank robberies in Orange County, California, since August. The 
suspect’s most recent robbery occurred October 17 at a Cathay Bank branch in Orange. 
Source: http://mvnewsla.com/orange-countv/2014/ll/03/fbi-looking-orange-county- 
cal-bear-bandit-bank-robber/ 

5. November 3, Boston Globe - (National) Bank of America restores online banking 
after two-hour shutdown. Bank of America customers were unable to login to their 
online banking accounts for 2 hours November 3 due to an unspecified technical issue. 
Some TD Bank customers also reported problems logging into their accounts via the 
bank’s mobile banking app during the outage. 

Source: 

http://www.bostonglobe.com/business/2014/ll/03/bankofamerica/lYggGcuNTYVbzH 

OCYKfyMO/storv.html 



For additional stories, see items 8 and 23 
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Transportation Systems Sector 

6. November 6, Syracuse Post-Standard - (New York) 26 injured after bus slams car, 
tractor-trailer on 1-81; car driver charged with DWI. Twenty-six people on a Pine 
Hills Trailways tour bus traveling from Toronto to New York City were taken to the 
hospital for non-life-threatening injuries following a crash that involved a semi-truck 
and passenger vehicle on southbound Interstate 81 in Nedrow November 6. The section 
of highway was closed to southbound traffic for around 3 hours due to the crash and the 
driver of the bus was charged with driving while intoxicated. 

Source: 

http://www.syracuse.com/news/index.ssf/2014/ll/26 injured after bus slams car tra 
ctor-trailer on i-81 car driver charged with d.html 

7. November 5, KGW 8 Portland - (Oregon) Landslide covers Highway 224 near 
Estacada. A portion of Highway 224 east of Estacada between milepost 31 and 37 was 
closed indefinitely following a landslide that covered all lanes of the highway 
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November 5, cutting off some rural communities. 

Source: http://www.kgw.com/story/news/local/2014/ll/05/landslide-covers-highwav- 
224-near-estacada/18561137/ 



8. November 5, KUSA 9 Denver - (Colorado) Suspect installed card skimmers at RTD 
stations. Authorities found and removed credit card skimmers at eight different 
Regional Transportation District (RTD) light rail pay stations at the Dry Creek, 

Mineral, and County Line stations in Denver November 5. The skimmers were 
removed before any payment card data could be stolen and authorities released photos 
of a man suspected of installing the devices. 

Source: http://www.9news.com/storv/news/local/2014/ll/05/photos-of-rtd-card- 
skimmer-suspect-released/1 8553503/ 
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Food and Agriculture Sector 

9. November 5, U.S. Food and Drug Administration - (National) Oasis Brands, Inc. 
recalls products Lacteos Santa Martha because of possible health risk. The U.S. 
Food and Drug Administration announced November 4 that Miami-based Oasis 
Brands, Inc., issued a recall for certain lots of various Lacteos Santa Martha dairy 
products due to possible Listeria monocytogenes contamination. The recall was 
initiated after routine testing by the Virginia Department of Agriculture detected the 
presence of Listeria monocytogenes in the products. 

Source: http://www.fda.gov/Safety/Recalls/ucm419283.htm 

10. November 5, U.S. Food and Drug Administration - (New York; New Jersey) House of 
Spices (India) Inc. issues alert on undeclared sulfites in “Golden Raisin”. The U.S. 
Food and Drug Administration announced November 3 that House of Spices issued a 
recall for some packages of its Laxmi Nutkhhat Golden Raisin products sold in New 
Jersey and New York due to undeclared sulfites. The recall was initiated after routine 
testing by the New York State Department of Agriculture and Markets revealed the 
presence of sulfites in the food treats. 

Source: http://www.fda.gov/Safety/Recalls/ucm421978.htm 

11. November 4, WZZM 13 Grand Rapids - (Michigan) Fire causes $100,000 in damage 
at Barry Co. barn. The source of a November 4 fire at a Thornapple Township farm is 
under investigation after it caused an estimated $100,000 in damage to a bam and its 
contents which included hay bales that were destroyed and cattle that suffered minor 
bums. 

Source: http://www.wzzml3.eom/story/news/local/2014/l 1/04/fire-causes- 100000-in- 
damage-at-barry-co-barn/1 848641 1/ 
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Water and Wastewater Systems Sector 



12. November 6, WPVI 6 Philadelphia - (Pennsylvania) Water main break floods south 
Philadelphia intersection. More than 800,000 gallons of water were estimated to have 
flooded a south Philadelphia intersection following a water main break that led to a 
second break and left more than 50 homes without water service for nearly 6 hours 
November 5. The road remained closed indefinitely and water main repairs continued. 
Source: http://6abc.com/news/water-main-break-floods-south-phillv- 
intersection/382201/ 

13. November 5, KNTV 11 San Jose - (California) Water main break floods southeast 
San Jose roadway. About 90,000 gallons of water were lost when a water main broke 
November 5 in San Jose and left about 20 San Jose Municipal Water System customers 
without water while repairs were being made. 

Source: http://www.nbcbayarea.com/news/local/Southeast-San-Jose-Water-Main- 
Break-Floods-Street-28 1698211 .html 

14. November 4, Huntsville Times - (Alabama) Fairhope water main break affects 
Montrose, Rock Creek, The Woodland. Many Fairhope Public Utilities customers 
north of Alabama State Route 104 in Fairhope were without water service for nearly 5 
hours after a 12-inch water main broke on Highway 98 November 4. 

Source: 

http://www.al.com/news/mobile/index.ssf/2014/ll/fairhope water main break affe.ht 
ml 
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Healthcare and Public Health Sector 



15. November 5, Birmingham Business Journal - (Alabama) Birmingham nonprofit exec 
arrested on $11M fraud charges. The former chief financial officer (CFO) of 
Birmingham Health Care in Alabama was charged with allegedly helping siphon $11 
million in federal grant money between January 2008 and March 2012, netting about 
$1.7 million through the plot. The former CFO aided others in diverting the federal 
grant money, assets, and property to private entities created by the nonprofit’s chief 
executive officer which were distributed amongst the individuals involved in the 
scheme. 

Source: http://www.bizioumals.corn/birmingharn/news/2014/ll/05/birmingham- 
nonprofit-exec-arrested-on- 1 lm-fraud.html 
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Government Facilities Sector 



16. November 6, Tyler Morning Telegraph - (Texas) Bomb threats targeting schools. 
Jacksonville High School, a Frankston Independent School District high school, and all 
schools within the Athens Independent School District in Texas were evacuated and 
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dismissed following a series of bomb threats November 5. Police searched the 
campuses and cleared the scene after nothing suspicious was found. 

Source: http://www.tvlerpaper.com/TP-News+Local/208143/bomb-threats-targeting- 
schools 



17. November 6, WHEC 10 Rochester - (New York) No school for students at School No. 
46. Crews worked to restore service after a power outage prompted the closure of 
Charles Carroll School No. 46 in Rochester November 6. 

Source: http ://w w w . whec . com/new s/stories/S 3611449. shtml 

18. November 4, KCBS 2 Los Angeles - (California) Thieves steal over $20,000 in 
computers from elementary school. Authorities are searching for two suspects who 
stole about 30 tablets valued at roughly $25,000 from Bryant Elementary School in 
Riverside November 2. 

Source: http://losangeles.cbslocal.com/2014/ll/04/thieves-steal-over-20k-in- 
computers-from-elementary-school/ 
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Emergency Services Sector 

19. November 5, KCNC 4 Denver - (Colorado) Stolen Fort Collins police rifles found, 2 
suspects arrested. Two suspects were arrested in connection to stealing police rifles 
and other police gear from locked patrol cars in Fort Collins after investigators found 
the stolen equipment. 

Source: http://denver.cbslocal.eom/2014/l l/05/stolen-fort-collins-police-rifles-found-2- 
suspects-arrested/ 

20. November 5, Duluth News Tribune - (Minnesota) 911 service problem fixed in 
Douglas County. Crews restored service after a 5 hour outage of 9-1-1 services for 
residents in Douglas County, Minnesota, November 5. 

Source: http://www.duluthnewstribune.com/content/91 1 -service-problem- fixed- 
douglas-county 

21. November 4, WGN 9 Chicago - (Illinois) Deputy charged in drug sting, partner 
found dead in federal jail. A sheriffs deputy in Cook County was arrested and 
charged November 3 in connection to a scheme where he allegedly robbed drug dealers 
and resold the drugs in some cases instead of arresting the individuals. The officer’s 
partner was found dead in an apparent suicide at the Metropolitan Correctional Center 
in Chicago after he was arrested and charged in the plot. 

Source: http://wgntv.com/2014/ll/04/deputy-charged-in-drug-sting-partner-found- 
dead-in-federal-jail/ 
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Information Technology Sector 



22. November 6, Securityweek - (International) New “WireLurker” malware targets 
iOS, Mac OS X users via trojanized applications. Researchers with Palo Alto 
Networks identified a new piece of malware targeting Apple OS X systems and iOS 
devices dubbed WireLurker, which can run malicious code in order to steal users’ 
contacts, Apple IDs, and other data. The malware spreads via trojanized and 
repackaged OS X applications and can compromise any iOS devices linked to an 
infected system via USB cable by infecting iOS applications on stock or jailbroken 
devices. 

Source: http://www.securityweek.com/new-wirelurker-malware-targets-ios-mac-os-x- 
users-troianized-applications 

23. November 6, Krebs on Security - (International) Feds arrest alleged ‘Silk Road 2’ 
admin, seize servers. FBI and DHS agents arrested a San Francisco man and charged 
him with drug trafficking, conspiracy to commit hacking, and money laundering for 
allegedly operating the Silk Road 2.0 underweb market that sold illegal drugs, 
fraudulent identification documents, and hacking services and tools. U.S. and European 
authorities seized control of servers hosting Silk Road 2.0 following the arrest. 

Source: http://krebsonsecuritv.com/2014/ll/feds-arrest-alleged-silk-road-2-admin- 
seize-servers/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



24. November 6, Madison.com - (Wisconsin) Nobody injured in Sun Prairie apartment 
building fire. A November 5 fire caused an estimated $125,000 in fire and smoke 
damage to a Sun Prairie apartment building and displaced residents from the structure’s 
16 units. The fire was contained to the basement of the building and is believed to have 
been sparked by an electrical issue. 

Source: http://host.madison.com/news/local/crime and courts/nobody-injured-in-sun- 
prairie-apartment-building-fire/article 248d3ab8-5el8-5eae-94b6-58898c918296.html 
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25. November 6, KCBS 2 Los Angeles - (California) Fire guts four businesses in Boyle 
Heights. Officials are investigating the source of a November 6 fire that gutted four 
businesses located inside a Boyle Heights commercial building. Authorities believe the 
fire may have ignited in a cabinet shop and spread through the attic of the structure. 
Source: http://losangeles.cbslocal.com/2014/ll/06/fire-guts-four-businesses-in-boyle- 
heights/ 

26. November 6, KPRC 2 Houston - (Texas) 3-alarm fire burns businesses at Katy 
shopping center. Authorities are investigating the cause of a 3-alarm fire that broke 
out November 5 and damaged businesses at a shopping center in Katy, Texas. 

Source: http://www.click2houston.com/news/3alarm-fire-burns-businesses-at-katy- 
shopping-center/29575002 

27. November 6, KHOU 11 Houston - (Texas) 10 injured after SUV crashes into 
restaurant. At least 10 people were injured November 5 when the driver of an SUV 
lost control of the vehicle and crashed through a wall of DiMassi’s Mediterranean 
Buffet in Houston. The restaurant was expected to reopen November 7 after repairs are 
made to the structure. 

Source: http://www.khou.com/storv/news/2014/ll/05/several-hurt-when-car-crashes- 
into-restaurant-on-kirby/1 8549509/ 

28. November 5, WCTV 6 Thomasville - (Florida) Monterey Apartment fire deemed an 
arson. Authorities are investigating as an arson a fire that broke out at the Monterey 
Apartments complex in Tallahassee November 4 that caused at least $500,000 in 
damages and displaced 6 families. 

Source: http://www.wctv.tv/home/headlines/Monterey-Apartment-Fire-Deemed-an- 
Arson-281655281.html 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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